G github.com Ongoing NPM supply chain attack uses binding.gyp to spread like a worm 6 points varunsharma07 5 months ago 0 comments